About this extension

Passbolt is an open source password manager designed for collaboration. You can securely generate, store, manage and monitor your team credentials.

Get access to all of your logins and passwords from multiple browsers or even your mobile phone. Create strong random passwords, thanks to the fully customizable password generator, and share them instantly with your team.

Passbolt is built on top of an open API made for developers and agile teams. Passbolt is extensible and yet usable by everyone. No technical knowledge is required to use it.

This is why Passbolt is trusted by small businesses, as well as government offices, regulated industries, and privacy-conscious organizations:

Boost collaboration & productivity:
- Easily share one password, or a folder with a single user or a group of users;
- Use personal or shared tags to identify passwords and secrets;
- Give specific access rights to a user or group;
- Get detailed reporting on access & change history.

Security by design. Audited and certified:
- True end-to-end encryption;
- Interoperable cryptography based on OpenPGP;
- Full control your own encryption key;
- Access revocation that actually works;
- Regularly audited by independent auditors.

Made in Europe.  Privacy by default:
- Host it in our cloud, located in Europe;
- Or self-host it for full data ownership;
- No tracker, no strings attached.

Passbolt source code comes under an AGPL license (yes even the commercial version) and is publicly available. You are free to audit it, contribute to it, or redistribute it.

This add-on is required to use the software, in order to provide advanced security features as well as functionality such as password auto filling on web pages.

Get started now:
https://www.passbolt.com/cloud/signup

Check out the source code:
https://github.com/passbolt

Rate your experience

Report this add-on for abuse

If you think this add-on violates Mozilla's add-on policies or has security or privacy issues, please report these issues to Mozilla using this form.

Please don't use this form to report bugs or request add-on features; this report will be sent to Mozilla and not to the add-on developer.

Release notes for 4.2.0

## [4.2.0] - 2023-08-23
### Added
- PB-24987 As an administrator I can define the password policies from the administration UI
- PB-25462 As an administrator I can deactivate RBACs with a feature flag
- PB-25036 As an administrator I can select PostgreSQL as database driver on installation
- PB-21403 As an administrator I can purge the email queue table from the command line

### Improved
- PB-24990 Performance optimisation of the cleanup command responsible to delete secrets without permissions
- PB-25263 Performance optimisation of the entry point retrieving the folders activity logs
- PB-25264 Performance optimisation of all the SQL queries retrieving user profiles
- PB-25199 Lower case UUIDs given as requests parameters before marshalling and persisting data
- PB-25389 As an administrator healthcheck/status.json requests should not be logged in the action_logs table
- PB-25734 As a user I do not want the first letters of my first and last names upper-cased when my profile is saved

### Security
- PB-25181 CSRF cookie should have secure flag set when site is served under HTTPs
- PB-25798 Fixes laminas/laminas-diactoros vulnerability by using the longwave/laminas-diactoros package

### Fixed
- PB-24931 As a user when I rename a tag with the same name, the tag should not be deleted
- PB-25019 As an administrator I can define LDAP filters case sensitivity
- PB-24986 As a user decrypting the SSO organisation settings I should not get a 500 error when the key could not be found in the keyring
- PB-25859 As an administrator notified of an account recovery I should see the first and last name of the acting user in the email
- PB-25472 As a user I can use an SMTP server using NTLM authentication
- PB-25475 As an administrator running the healthcheck, I should be warned for self-signed and wildcard certs instead of having a failure
- PB-25720 As an administrator I should not see a false error in the healthcheck when reading the App.base config
- PB-25800 As an administrator I should be able to migrate from v3 my default LDAP settings

### Maintenance
- PB-21412 Upgrade phpstan to v1.10.15
- PB-21413 Upgrade psalm version to v5.12.0
- PB-21414 Upgrade cakephp codesniffer to v4.7
- PB-21672 Bump lorenzo/cakephp-email-queue package to 5.1
- PB-21917 Bump bcrowe/cakephp-api-pagination to v3.0.0
- PB-21918 Bump spomky-labs/otphp to v10.0.3
- PB-21919 Update enygma/yubikey package
- PB-22052 Passbolt test data version bump to v4.1.0
- PB-25379 Update vierge-noire/cakephp-fixture-factories package
- PB-24575 As a developer release notes should be automatically published on Github on new tag release
- PB-25471 As a developer Crowdin should export only a selected subset of languages
- PB-25801 As a developer I can create unpublished test packages

Used by

Report this add-on for abuse